2009-03-05 17:14:11

by Daniel Walsh

[permalink] [raw]
Subject: [refpolicy] system_fstools.patch

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F11/system_fstools.patch

Remove label for badblocks and mkswap no need to transition

fsadm creates files in nfs and cifs directories

Uses terminals

We run it unconfined
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkmwCGMACgkQrlYvE4MpobPs1gCdHCz2XzM4mh51kuKQ8B6buwWM
eRoAnRs6hFnOEXZZm5CFPgU1IcLTnxak
=gM6N
-----END PGP SIGNATURE-----


2009-04-03 14:42:52

by cpebenito

[permalink] [raw]
Subject: [refpolicy] system_fstools.patch

On Thu, 2009-03-05 at 13:14 -0400, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F11/system_fstools.patch
>
> Remove label for badblocks and mkswap no need to transition

Still dropping this block.

> fsadm creates files in nfs and cifs directories

Why?

> Uses terminals

Why are all terminals needed? Console and user terminals should be
sufficient.

> We run it unconfined

moved this to distro_redhat

--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150

2009-04-03 20:17:35

by Daniel Walsh

[permalink] [raw]
Subject: [refpolicy] system_fstools.patch

On 04/03/2009 10:42 AM, Christopher J. PeBenito wrote:
> On Thu, 2009-03-05 at 13:14 -0400, Daniel J Walsh wrote:
>> http://people.fedoraproject.org/~dwalsh/SELinux/F11/system_fstools.patch
>>
>> Remove label for badblocks and mkswap no need to transition
>
> Still dropping this block.
>
>> fsadm creates files in nfs and cifs directories
>
Building a kernel or other packages in a nfs and cifs environment
involes fsadm tools writing to these directories I believe.

> Why?
>
>> Uses terminals
>
If one of these tools runs during boot it will write to a tty_device_t.

> Why are all terminals needed? Console and user terminals should be
> sufficient.
>
>> We run it unconfined
>
> moved this to distro_redhat
>